CVE-2026-30069: n/a

This vulnerability is a NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1. An attacker can trigger this condition by sending a specially crafted payload, resulting in a Denial of Service (DoS) condition. The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability. There is no known patch or official remediation guidance available at this time.

Successful exploitation results in a Denial of Service (DoS) condition, disrupting the availability of the affected free5gc service. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting exposure of the affected component to untrusted networks and monitor for anomalous payloads targeting the UDMC registration handler.